In the Linux kernel, the following vulnerability has been resolved:
usb: aqc111: check packet for fixup for true limit
If a device sends a packet that is inbetween 0 and sizeof(u64) the value passed to skb_trim() as length will wrap around ending up as some very large value.
The driver will then proceed to parse the header located at that position, which will either oops or process some random value.
The fix is to check against sizeof(u64) rather than 0, which the driver currently does. The issue exists since the introduction of the driver.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-preemptUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rtUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-base | Jun 12, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-ibm-5.4Upgrade linux-gcpUpgrade linux-gkeUpgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-bluefieldUpgrade linux-ibm-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-aws-5.15Upgrade linux-nvidia-tegraUpgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-raspiUpgrade linux-ibmUpgrade linux-nvidia-tegra-igxUpgrade linux-gkeop-5.15Upgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-hwe-5.4Upgrade linux-nvidia-6.5Upgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-nvidiaUpgrade linux-xilinx-zynqmpUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-azureUpgrade linux-azure-fde-5.15Upgrade linux-iotUpgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-azure-fdeUpgrade linux-intel-iotgUpgrade linux-gcp-5.4 | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub